Intel Software Guard Extensions SDK vulnerabilities

4 CVEs affecting Intel Software Guard Extensions SDK, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-0561, published 2020-02-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-0561, published 2020-02-13. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2019-14566, published 2019-11-14. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service…
CVE-2019-14565, published 2019-11-14. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information…
CVE-2019-0122, published 2019-03-14. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated user to potentially enable information disclosure or denial…